session: runs firewallcmd