new more flexible firewall