open salt-master firewall for mirror server