diff --git a/02-ssh-help.txt b/02-ssh-help.txt
index 85787b4..5b1ded5 100755
--- a/02-ssh-help.txt
+++ b/02-ssh-help.txt
@@ -44,8 +44,8 @@ cd /etc/ssh
 vi /etc/ssh/sshd_config
 PasswordAuthentication no
 PermitRootLogin no
-[Socket]
-SocketProtocol=mptcp
+# [Socket]
+# SocketProtocol=mptcp
 
 systemctl restart sshd
 ----------------------------------------------------------
diff --git a/03-firewalld.txt b/03-firewalld.txt
index 03497b0..125d317 100755
--- a/03-firewalld.txt
+++ b/03-firewalld.txt
@@ -1,34 +1,39 @@
-sudo apt update
-sudo apt install firewalld
-sudo systemctl enable firewalld
-sudo apt install firewall-config
-sudo apt install system-config-firewall-tui
+su -
+apt update
+apt install firewalld
+systemctl enable firewalld
+apt install firewall-config
+apt install system-config-firewall-tui
 
-sudo systemctl stop firewalld.service
-sudo systemctl disable firewalld.service
+systemctl stop firewalld.service
+systemctl disable firewalld.service
 apt policy firewalld
+
 firewall-cmd --permanent --add-port=80/tcp
 firewall-cmd --permanent --add-port=443/tcp
 firewall-cmd --permanent --add-source=192.168.1.0/24
+firewall-cmd --add-service=ssh --permanent
+systemctl enable firewalld
 firewall-cmd --reload
-sudo firewall-cmd --state
+systemctl status firewalld
+firewall-cmd --state
 firewall-cmd --list-services
 firewall-cmd --list-all
 
-#VNC
-sudo firewall-cmd --zone=public --add-port 5901/tcp --permanent
-sudo firewall-cmd --zone=public --add-service=vnc-server --permanent
-sudo firewall-cmd --zone=public --add-source=192.168.1.0/24
-sudo firewall-cmd --reload
+# VNC
+# sudo firewall-cmd --zone=public --add-port 5901/tcp --permanent
+# sudo firewall-cmd --zone=public --add-service=vnc-server --permanent
+# sudo firewall-cmd --zone=public --add-source=192.168.1.0/24
+# sudo firewall-cmd --reload
 
-firewall-cmd --permanent --add-service=vnc-server
-firewall-cmd --reload
-sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent
+# firewall-cmd --permanent --add-service=vnc-server
+# firewall-cmd --reload
+# sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent
 
 firewall-cmd --get-active-zones
 firewall-cmd --zone=public --list-all
-firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop'
-firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept'
+# firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop'
+# firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept'
 firewall-cmd --zone=internal --add-source=192.168.1.0/24
 firewall-cmd --zone=public --remove-service=ssh
 firewall-cmd --zone=public --remove-service=dhcpv6-client