[OPTION 2] BZ#1122701 - Incoming ports are wide open

https://bugzilla.redhat.com/show_bug.cgi?id=1122701

OPTION 2: Recreate the basic firewall rules.

Advantage: the resulting rules are simple. Disadvantage: we replicate the system defaults on puppet level.

Resulting rules on EL7: http://fpaste.org/122024/40673550/
Original rules on EL6: http://fpaste.org/122025/35557140/
Hm yeah but then it wouldn't work on CentOS for example. I thought this was ok because Astapor is only really targeting Red Hat distros AFAIK. Maybe we can change it to something like `$::osfamily == 'RedHat' and $::operatingsystem != 'Fedora' and $::operatingsystemmajrelease > 6`, but i'd prefer to do it in a refactoring phase :) We're using a similar condition here which we'd need to amend as well: https://github.com/redhat-openstack/astapor/blob/5a7d7eef28f9d81824a6e227b709548cb0838a14/puppet/modules/quickstack/manifests/openstack_common.pp#L5-L8