major vagrant cleanup changes

- instead of using 80/443, we use port 8000/4443 for forwarding (because SKYPE of all things tends to use 80/443 by default)
- use 'localhost' instead of 'vagrant-ubuntu-trusty-32' as hostname, because on Win7, vagrant won't resolve that hostname
- move all firewall stuff into instance.pp