firewall: use stages from stdlib