turn off firewall by default in provision.sh