start with firewall off