update firewall rules