add firewall settings