firewall: rework interface address determination to skip ipv6 addresses