simplify firewalling script