config: ufw: update firewall rules, add comments