skel for firewall.sh