firewall: update to git head (#13652)