(legacy) extend behaviour of "anti lockout" to redirection to avoid lockout by portforward (https://github.com/opnsense/core/issues/327)

Eventually we should try to avoid having lots of rules in the firewall generation.