Add some default iptables rules to allow SSh and block most everything else

This means that every role that includes a profile::base will be locked down by
default which is good.

[FIXED INFRA-72]