before the metered firewall