add firewall recipe