introduce IP_FW_X which is compatible with existing code