use firewall provided by osl