add ssh to control firewall