firewall some services to particular interfaces
replace iptables with nftables disable reverse path filtering for all hosts allow port 5353 for host running dnsmasq closes #31
parameterize various IP addresses