Add firewall rules

Change-Id: Iaec1b89d0c184fd784690caa3603ea23bb16e8dd