firewall: Allow IGMP and MLD input on WAN