firewall: - fix processing of rules with an ip family option - append interface rules...