fix: restart firewalld only when it was running

in !187 (merged) we enable the firewalld.service and also restart it. But we don't have to restart if it was not enable and running since we only change firewall rule when it was enable and running