FW rules for apt repo