firewall: fix bug in iface hotplug handler