Describir: Firewall design and analysis