update firewall config