Now the whole "FIREWALL=..." directive (with its content) could be prefixed by "#" comment characters to avoid OpenVZ warnings about non-supported multiline directives.