FWAPI-35: ipf rules should more judicious in keeping state
FWAPI-39: All VMs need to allow pings from any by default