firewall: remove done todo