base-files: disable bridge firewalling by default