manually deal with firewall rules

Change-Id: Ie83c1cc1a9d53f9c133cb29b70f52f63054a40bf