how to block everything except for port 80 and 22?