simplify firewall.sh