getting started, firewall first