reload firewall rules on startup