firewall3: fix null pointer access when no target is present