firewall: update to latest git HEAD and build with LTO