fix a race condition with dynamic interfaces and firewalling