firewall: add rules for memcached