last things and fixes for some of the iSec reported issues

Inlcudes some of the fixes for issues reproted by iSec and the fix for unattended-upgrades that I was working on when iSec started the sec audit. Closes #439, #437, #435, #441 

Also adds
- the facistfirewall setting to torrc file so that the ports could also be restricted in the iptables rules. 
- Example network firewall rules
- xSendFile so that large files can be downloaded
Apache is set to log to /dev/null not to that directories and flask is not set to log for the source interface. OSSEC does watch those default apache log locations so that if an admin enables logging for troubleshooting they can get a copy of the logs. This does not collect any info about the source unless the apache error log is changed from /dev/null.