add basic firewall config