add firewall protection for wan_device in addition to wan_ifname (fixes #852)