https://123dok.org/document/q05px78x-localizing-security-for-distributed-firewalls.html