last things and fixes for some of the iSec reported issues

Inlcudes some of the fixes for issues reproted by iSec and the fix for unattended-upgrades that I was working on when iSec started the sec audit. Closes #439, #437, #435, #441 

Also adds
- the facistfirewall setting to torrc file so that the ports could also be restricted in the iptables rules. 
- Example network firewall rules
- xSendFile so that large files can be downloaded
@dolanjs Do we actually want to watch this? From the report:

> Fortunately, the Apache access log for the source application is not watched. Reporting the access log
for the source application would have allowed for correlations attacks, which can be used to identify
the source.