revised firewall for enhanced security with local dns redirect