add firewall.sh