firewall3: remove last remaining sprintf()