map: don't set default firewall zone to wan