add fence_xvm firewall rules