(firewall) empty means "in"... confusing ;) https://github.com/opnsense/core/blob/17.1.2/src/etc/inc/filter.inc#L2314-L2315