Bug 1058225: attempt to (mostly) replicate the current AWS config

This replaces the specific source IPs for ping with 0.0.0.0/0, which is
what we do for the rest of Mozilla (ever notice you can ping anything?).
It also removes the openstack network, gets the netmask right for the
VPN, and adds some comments to identify subnets.