restrict holmium firewall to corporate office access only

the old blog is no longer dns routable, but needs to stay online for
Tilman to access while our blog contractor guy does his thing

Change-Id: I8f92e890883885a456bd6eb2dd1e6dd7f5e4673f
RT: 8050