firewalld - what needs to be added?