enable firewall service by default