moving base firewall config out of bender