more firewall updates