Currently we don't do any firewall magic in tl-setup if we do not detect an active firewall. That might not be the best approach though if the firewall is just temporarily disabled and the user will turn it back on again. We should instead try to add our services to the configuration, without re-enabling the firewall, so that they'll be available the next time the firewall is turned on.