StatelessFirewall: initial code