is it possible to put firewall in / / /files/root/firewall
and a modded /files/etc/rc.local

where rc.local has
onetime()
cp /root/firewall /etc/config
rm /root/firewall