correct firewall rule