Attempt to do iptable-like things at http level