tor-relay - add firewalling

as requested in #7971, let this
have strict ferm rules before using it
on radium

base::firewall added to radium in separate change

Change-Id: Ie800d4ef97563dc4bdeefc2d58c5562ae3e3ae2b
RT: 7971
Merge "tor-relay - add firewalling" into production