added more configuration options to firewall section