updated firewall to pass GRE