Only allow SSH en Web traffic on the QA's external interfaces.
Removed ssh iptable rule where possible.