firewall: validate max length of zone name