build: switch to firewall4 by default