add firewalld setting