add cluster.fwd, fix duplicated firewall_settings