firewall fixes