added firewall and updated permissions