[net] firewall_policy=2