simplify v4 test by using a smaller netmask /24
relax ipv4 firewall