try to start breaking up firewall rules into something not quite as messy