replace firewall ruleset with trusted host list