firewall: prevent redundant rules if multiple ports and multiple icmp types are given...