Update notes for submitted changes

* Invert 998 drop / 999 allow firewall rule