better firewalls; more tests; partial centos support