Add gluon-firewall, use gluon.sysconfig on reboot page

gluon-firewall rejects all traffic on WAN except for SSH and thus
protects against being an open resolver