add note about firewalld