o added firewall bits
o fixed ctstate -> state