use proto instead of protocol in uci firewall