more app/db firewall changes