Default the firewall to deny