Fix ferm rules for install-server, haproxy, backup

All of these are installed on brewster. So punching holes in the role
class to allow for 80, 8080, 8140 TCP ports and 67 UDP port. In the
process also fix backup rules to use the new defs

Change-Id: I41e2550a2094880821ea667cc24427d9b222a795