Fixes bug that if only backlist is supplied incorrectly getting 403 error

[MekDrop]

If this middleware is used without whitelist and only with backlist is supplied, it incorrectly things that not blacklisted IPs are bad.

F.e.:

Dispatcher::run([
    (new Middlewares\Firewall(null))
        ->blacklist([
            '123.0.0.1',
            '123.0.0.2',
        ])
]);

Incorrectly thinks that if user comes from IP 127.0.0.1 that with such IP is something wrong.

It seems for this case changing IpFirewall default state value helps because in that case IP validation works with rule not $whited && !$blacked but with !$blacked || $whited. And that is what we need for this case.

[MekDrop]

Hmm... It seems there is a problem with current tests. I didn't touched that part where tests are failing... :/

[oscarotero]

LGTM. Don't worry about the tests, it's a different issue. I'm going to fix it and release a new version. Thanks!