firewall: get rid of recursive shell script inclusion to improve hush compatibility