firewall service with forward configuration