add firewall rule for
 -TODO: narrow ip range to on campus only