Firewalld maybe works for reall

Basic firewalld configuration that blocks most stuff, and allows the basics, is functional, I think. Might be missing some ports. Needs testing.