examples/ip_pipeline: rework firewall pipeline