firewall: fix wrong rule order if multiple protocols are used