move firewall notes to snippets