Check if firewall configuration is consistent with generated one from uci
Check if user has not modified firewall outside of uci. It also cover case when firewall is reconfigured in uci but service wasn't restarted but that can be solved or can be reported as false positive.