valid config.xml for new firewall