Move firewall rule auto-generation to separate script, install DPKG hooks