StatefulFirewall: add comments and a workaround
StatelessFirewall: use RIR delegated prefixes
StatelessFirewall: rename and add a comment