bridge-firewall on Bro

>an empty value after loading the scan rule (loading via http rule) ;

That will often work too, though it's potentially a bit risky - you need
to understand how the variable's used in order to be sure that
won't ever be a legitimate value for it. It's cleaner to change it per
the description in my previous note, that way the intent is clear.