1. A method of matching a data packet to a rule in a network gateway having a rule base, comprising determining one or more identification values on the basis of the data packet, querying and receiving property value(s) associated with said one or more identification values, comparing said property value(s) to at least one rule in the rule base, said at least one rule comprising property value(s) and an action, and taking the action defined in said at least one rule, if said property value(s) of the rule match corresponding property value(s) associated with said one or more identification values.