Hoping to achieve a more expressive firewall than we've used in the past without extensive effort on HP4