fix firewall rule