cfg-firewall: update to new ip cider