added firewall rules