fixing firewall directive to fit with BAL infrastructure