machines: postfix, restrict interfaces
machines: install more tools by default