Add firewall rules for next/app servers.

Don't block postfix/smtp for localhost.