remove proto:all option in firewall setting