add nfs firewall rules