Move $rule portion out of the ng0 check that accidently slipped in.  This combined with my earlier change unbreaks traffic from the firewall itself and also unbreaks nat redirect traffic.
Move $rule portion out of the ng0 check that accidently slipped in.  This
combined with my earlier change unbreaks traffic from the firewall itself
and also unbreaks nat redirect traffic.

Found-by: Billm

NewEraCracker/pfsense,dennypage/pfsense,pfsense/pfsense,pfsense/pfsense,NOYB/pfsense,ptorsten/pfsense,phil-davis/pfsense,pfsense/pfsense,ptorsten/pfsense,brunostein/pfsense,ch1c4um/pfsense,ptorsten/pfsense,brunostein/pfsense,jxmx/pfsense,phil-davis/pfsense,phil-davis/pfsense,ch1c4um/pfsense,jxmx/pfsense,BlackstarGroup/pfsense,NOYB/pfsense,ch1c4um/pfsense,dennypage/pfsense,BlackstarGroup/pfsense,dennypage/pfsense,jxmx/pfsense,NewEraCracker/pfsense,NOYB/pfsense,pfsense/pfsense,BlackstarGroup/pfsense,ch1c4um/pfsense,BlackstarGroup/pfsense,NewEraCracker/pfsense,NewEraCracker/pfsense,phil-davis/pfsense,brunostein/pfsense,dennypage/pfsense