firewall with status