firewall: prevent duplicate values in interface state vars