firewall, work in progress,  refactor gateway logic, only extends new plugin -> filterrule classes, doesn't change the internals yet.