Firewall config

[vielmetti]

I understand the need to deploy a firewall if OpenStack services have some inherent fragility. The provided iptables config locks down the node to a single IP address defined at provisioning time. If the user wants to move from place to place, they will not be able to get back in except via Packet's SOS login (serial over ssh).

Opening up the question two ways:

• what firewall is needed for security
• what ports should be OK to be world-access for maximum availability