auto-generate firewall rule options