examples/ip_pipeline: rework firewall CLI