Firewall: get rid of /32 subnetz when using manual ip addresses