StatelessFirewall: make some fixes