Add basic inbound/outbound firewall, and a customised one for web hosts