Create a new sec group with open ports for testing

Rather than just opening up everything, only allow necessary ports.
Also, stick these rules inside a new sec group named 'ursula', and
boot VMs with this sec group.