firewall-policy: Clarify policy rules.