Rip out dead "firewall opener" code, replace in pipeline with anti-symmetric-NAT tactics.