improved firewall error handling