move fw rules out of deps.pp