firewall: add rules for glance registry