* UFW: limit LocalSend (53317) to LAN and remove default SSH (22) rule * Revert LocalSend change and drop SSH allow rule