applications/luci-firewall: allow negations in all applicable fields (#468)