fix firewall equivalence