more documenation to firewall allow format