more explicit REJECT on snakebite whitehole

RETURN is implicit and assumes the default will be REJECT

Author: ewdurbin

pillar/base/firewall/snakebite.sls

@@ -4,6 +4,6 @@ firewall:
   snakebite-blackhole-udp:
     raw: -A INPUT -p udp --destination-port 56666 -j DROP
   snakebite-whitehole-tcp:
-    raw: -A INPUT -p tcp --destination-port 56667 -j RETURN
+    raw: -A INPUT -p tcp --destination-port 56667 -j REJECT
   snakebite-whitehole-udp:
-    raw: -A INPUT -p udp --destination-port 56667 -j RETURN
+    raw: -A INPUT -p udp --destination-port 56667 -j REJECT