add open ports for Galera, firewall more ports upstream

source/resources/apps/mariadb-galera/forksand-mariadb-setup

@@ -137,5 +137,13 @@ systemctl enable pen-galera.service
 # XXX fix on sql1 sql2 sql3 sql4
 # For firewall, need to open port 4444 for rsync when cluster node needs to sync up.
 
+# Galera Access Ports
+-A INPUT -p tcp --dport 4567 -j ACCEPT
+-A INPUT -p tcp --dport 4568 -j ACCEPT
+
+# MariaDB Access Port
+-A INPUT -p tcp --dport 3306 -j ACCEPT
+
+# rsync port for Galera node synchronization
 -A INPUT -p tcp --dport 4444 -j ACCEPT