ufw: reject smtp out
common tasks: packages before config