Post-firewall hook to insert custom rules?