1. A method comprising: accessing, by a firewall device and based on a filter specification, a first hardware-implemented filter of a plurality of hardware-implemented filters associated with the firewall device, each of the plurality of hardware-implemented filters being a physical filter included in the firewall device and not being a software-implemented filter, the filter specification identifying a filter sequence of the plurality of hardware-implemented filters to be executed to process packets; processing, by the firewall device, a packet using the first hardware-implemented filter identified by the filter sequence, the packet being processed based on first information included in the packet and a type of filter associated with the first hardware-implemented filter; determining, by the firewall device, that a particular rule, associated with the first hardware-implemented filter, includes a next-filter action, the next-filter action identifying a second hardware-implemented filter that is not included in the filter sequence; accessing, by the firewall device, and based on the next-filter action and the packet, the second hardware-implemented filter; and processing, by the firewall device, the packet using the second hardware-implemented filter after processing the packet using the first hardware-implemented filter and before processing the packet using a third hardware-implemented filter included in the filter sequence, an actual sequence for processing the packet of using the second hardware-implemented filter after processing the packet using the first hardware-implemented filter and before processing the packet using the third hardware-implemented filter being different than the filter sequence indicated by the filter specification, the packet being processed based on second information included in the packet and a type of filter associated with the second hardware-implemented filter.