added final firewall rule