a firewall parser