now uses -firewall files to resolve conflicts for vzlist