refactoring:
* firewall is again at dda
* webserver common code is migrated to util_web