add firewall ports