Add bastion node
Fix interface typo
Allow forwarding web
Remove INPUT jump
Allow ip forward
Split 80 and 443 into separate routing rules
Test removing drops
Masquerade?
Masquerade? take 2
Allow established forward traffic
Fix duplicate resource name
Consolidate routing again
Remove masquerade
Add sysctl module
Go back to when things worked
Remove iniface and proto
Recombine web ports into one resource
Apply rate limits
missing comma
fix rate syntax