handmade linux firewall