wirefilter integration

[Geal]

I'd like to integrate wirefilter (or other solutions if we find better ones) to have small, fast filters deployable at runtime. These would be typically used for quick fixes, incident response, blocking malicious IPs, etc.