openshift.ks: Stop using lokkit

Declare firewall_allow as an associative array at the bottom of
openshift.ks.  Set protocol:port rules (e.g., udp:53) in this associative
array wherever previously lokkit was used.

Add configure_firewall function, which disables lokkit and writes a basic
ruleset to /etc/sysconfig/iptables.

Add configure_firewall_add_rules, which iterates over ${firewall_allow[@]}
and adds ACCEPT rules to /etc/sysconfig/iptables for the rules defined in
${firewall_allow[@]}.

configure_host: Call configure_firewall.

configure_openshift: Call configure_firewall_add_rules.

restart_services: Restart the iptables service to pick up rules added to
/etc/sysconfig/iptables.

This commit fixes bug 1067794.