[PATCH] firewall: Avoid creating a rule that permits all traffic on invalid source