- create classes for each class of in/out traffic - use hier_include to add firewall rules to each role
- update nameservers for syd1 to use local dns resolvers - update pxeserver to au-syd1 cobbler