config marewall ok