iptables: add option to install firewall script
rpi_server2.config: make read-only filesystem and remove some options