create new module FirewallPrivateAddressOnly

This patch provides a new firewall method that prevents users from accidentally exposing internal services to the Internet.

Signed-off-by: nbenedek contact@nbenedek.me