using multi index container in firewall