base: add firewall::pre class