has anyone built a "stateful" firewall w/ the new kernel yet?