Port range support in the firewaller.

The firewaller watches the openedPorts collection, the ports field on units is no longer updated.