add firewall filters and tests