firewall: update to latest git HEAD