common: Deactivate packet filtering on all hosts.

This would introduce additional complexity for _no_ reason, because
every port which is listening to an external address needs to be
publicly accessible. So services are either not listening at all or only
locally and we don't provide shell access to users so there really is no
need for a packet filter.

Or in other words: You can't attack something that isn't there.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
common: Set allowUnfree to true.

This is needed for intel microcode updates.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
ssl: Update headcounter.org public key.

This was actually replaced and reissued on April 9th 2014, in response
to the Heartbleed vulnerability in case you are worried by the commit
date. Had this change lying in the working dir for a while, but didn't
commit - until now :-)

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
ultron: Fix evaluation of machine expression.

This was caused by an accidentally committed "/*" in e2a69e7.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
network: Add machines "dugee" and "gussh".

Both machines will serve as DNS servers soon.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>