Update fw.sh

fixing dns and dhcp chain to be after blocking