Most firewalls only work properly if the firewall operator is on friendly terms with the people inside, because these folks have all the time in the world to find some proxy or VPN or tunnel or other gap that will let them keep doing what they want to do.