luci-app-firewall: use new ipmask validation types when applicable