Added packet_based mode

Firewalls can now be configured for packet-based mode via the
basic_security_cfg.yml template.