firewall: FixUp Rules