[ctford, kitaka] Added a crude recipe for firewalling all ports but http and ssh.