access controls

Fresh install on AWS Debian 9. When installing on AWS it'll be in your AWS Virtual Private Cloud by default, thus installing with an IP address of something like 172.30.0.10. So even though the instance will have a static IP address (Elastic IP with AWS), it's still NAT'ed. Following guidance...