separate firewall commands