the internal lists are always unmodifiable, no need to do it in the get calls
Avoid the expensive search if we don't know any firewalls