libs/cbi: comply with changed firewall interface