An experiment in making large firewall configurations easier to inspect and explain.