firewall config for db