fix initial firewall to allow outgoing lo traffic and outgoing port 443 (#3736)

this allows nameserver queries to the local resolver to work and clones to the
leap https repository to work

Change-Id: I575d08405a0c28e12c8d201a8dbc79585a5a9a48