464xlat: don't set default firewall zone to wan