turn ipfw back on in onelab builds - hopefully this should solve the frozen kernel...