fw rule required for update