firewall, work in progress, refactor gateway logic, only extends new plugin -> filterrule classes, doesn't change the internals yet.
