Firewall rule analyzer