new firewall rules now persist