6b6e9c7721
fwaas backend rules don't have to be in the DB, since they are never retrieved from there. Also the Tag of the allow-external rule should be the last one, as it originally was, before the FWaaS feature. Change-Id: I6acfeef780ffd6d4aecb97e4b49e7907f7eee154