how do firewalls process rules