add firewall rules and ip forward