added firewalling support when using virtual IPs