If a static ip address can be used (as will be the case of a direct connection) the firewall can be started at boot time through a rc-script.