fix this firewall rule before I forget