fixed firewall config syntax; made default firewall settings more restrictive, since connectivity bug comes from IP addressing