Firewall: modified firewall-groups so that they can be empty even if used in rules

Now one can create a group, use it in a rule and then delete every entry
from the group. (The firewallrule then will be displayed yellow and
disabled).