use stateconf for firewall.service