Tightenting firewall rules