firewall and diff