Forward Firewall: reorganised ruletable layout