[OPTION 2] BZ#1122701 - Incoming ports are wide open

https://bugzilla.redhat.com/show_bug.cgi?id=1122701

OPTION 2: Recreate the basic firewall rules.

Advantage: the resulting rules are simple. Disadvantage: we replicate the system defaults on puppet level.

Resulting rules on EL7: http://fpaste.org/122024/40673550/
Original rules on EL6: http://fpaste.org/122025/35557140/
Perhaps we should instead ensure absent on the package here?  There were some timing issues, iirc between iptables starting and friewalld service, though I could be remembering wrong