firewall: add debug mode to post