Allow whitelisting of queries

The current behavior of the firewall filter is to allow all queries except the ones that match a rule. This is not always the desired behavior and an option to invert the default action to blocking all queries should be added.

Add ability to white list that is instead of "deny" , also support "allow" in which case all queries matching the rule should be accepted, others should be rejected