typical firewall script