Changes to firewall definition to use external config files

iptables state is too flaky