simplify firewall stuff, maybe