firewall: reject packets on some hosts

hosts/vno1-oh2/configuration.nix

@@ -624,6 +624,7 @@
     firewall = {
       allowedUDPPorts = [53 80 443];
       allowedTCPPorts = [53 80 443];
+      rejectPackets = true;
     };
   };
 }

hosts/vno3-rp3b/configuration.nix

@@ -116,6 +116,7 @@
     hostName = "vno3-rp3b";
     domain = "servers.jakst";
     dhcpcd.enable = true;
+    firewall.rejectPackets = true;
   };
 
   nixpkgs.hostPlatform = "aarch64-linux";