firewall: fix typo in ESP rule