refactored a lot concerning iptables and ssh security