Show default rules and stop allowing every WireGuard VPN device

WireGuard devices no longer reach every port of a server. The firewall shows only the rules the customer can see, and WireGuard devices get their own rule.