Final firewall rule tweak