firewall3: make reject types selectable by user