Added support for constraints to network firewalls