add profile::firewall skeleton
add firewall rule for ssh to profile::base
rearrange profile::pe classes and add firewall rules