2013-12-13 - production
14:11 <akosiaris> applied the new installserver role to brewster, carbon, bast4001 and hooft. This implies installation of ferm and usage of base::firewall which means default firewall policy will now be DROP. Punched necessary holes for services to work. [production]