Working iptables + fail2ban setup, pulled in from genesis/ansible-firewall

There were some tweaks to get it working properly, that will be pushed back to ansible-firewall in time for the genesis 0.3 release