Domain Restriction Based Formal Model for Firewall Configurations