use placeholders for the firewall