enable firewall on ytterbium

only after ferm rules have been applied that
make holes for gerrit and all other roles
on this node

Change-Id: Ia841064c72b4779aaf4071932982d44669731708
Merge "enable firewall on ytterbium" into production