webserver - replace firewall rules with ferm

use the ferm classes for firewalling, like we do
in other places, do not use the older firewall
class anymore, so eventually we can delete misc/firewall.pp

enable us to merge Ie987ec2312c5e9d

Change-Id: I72ad0e33f7f06d4c98bd28129d63d409bb2d0f2c
Merge "webserver - replace firewall rules with ferm" into production