BUILD workitems: Setup firewall that drops all connections towards the internet

Disable outgoing connections, since no fetching from the internet should be needed during BUILD workitems. Advantages:

• no hidden external dependencies
• no possibility to regress in the future
• potential malware in any of the hundreds of pre-installed software packages is prevented to download payload from the internet.

The firewall should LOG such connection attempts.