working on fw rules for docker