first pass on firewall using quickstack::firewall when possible; Added switch conditions