Firewall should be on by default