firewall: rework state variable handling, use uci_toggle_state() where applicable...