change system calls to use bin scripts; rename 'filter' to 'firewall'