Firewall enhancements: accept basics (22, 80) and restrict everything on all IPs, not just MAIN_IP. Expand friends ports manipulations to be able to finetune ports/src/dst without writin too much configuration.