Merge "firewall: specify interfaces for rules explicitly."