firewall start/stop takes a long time

We should profile what's taking so long, and cut the response time.

(from redmine: created on 2014-05-07, closed on 2014-05-07, relates #5622 (closed), precedes #5588 (closed))