generates firewall config for group