Skip floating rules with all interfaces disabled. Issue #11688
Skip floating rules with all interfaces disabled. Issue #11688

Prior to this change, if a floating rule had associated interfaces, but
they were all disabled, the rule would be generated without any
interface specificiation, causing it to erroneously be applied to *all
interfaces*.

For example, a rule that looked like this:

    block  out  on {  vtnet1  } inet from any to any tracker 1615945995  label "USER_RULE: FLOATER"

If the interface for vtnet1 was disabled (in the webcfg), then the rule
would be generated like this:

    block  out inet from any to any tacker 1615945995  label "USER_RULE: FLOATER"

This fixes that problem by instead skipping that floating rule, since it
has no active interfaces to which to apply.

See https://redmine.pfsense.org/issues/11688

pfsense/pfsense,dennypage/pfsense,dennypage/pfsense,pfsense/pfsense,pfsense/pfsense,NewEraCracker/pfsense,pfsense/pfsense,dennypage/pfsense,NewEraCracker/pfsense,NewEraCracker/pfsense,dennypage/pfsense,NewEraCracker/pfsense