start the compiler for iptables setup
starts the rules for iptables to be as restrictive as possible

by default get drop everything
sets up to only allow ssh from with in the us
a little clean up
update to nginx 1.7.3
only applies the iptables to the production

we are going to need to edit this a little more but we only want the in
us ip rule to be on live, so it's only in production for this min