How do firewalls process rules?