Add 'default' attribute to firewall resource for setting default behavior for incoming connections

Because sometimes you need to set the default behavior for all incoming connections. `:deny` is the default.

This capability is documented here: https://help.ubuntu.com/community/UFW