set up firewall to allow traffic to/from bridge interface
bootstrap-cosmos.sh requires a tagpattern now