[package] firewall: fix another notrack related bug