[PATCH 1/2] firewall: add description strings