kerberos slow to authenticate and simple firewall syntax question