fix firewall rules