- change AP firewall back to script, now using netfilter (requ raspbian 10)

- install netfilter packages on AP nodes

roles/ap/files/nft-rules-nat

@@ -0,0 +1,6 @@
+#!/bin/bash
+nft add table ip nat
+nft add chain ip nat prerouting { type nat hook prerouting priority 0 \; }
+nft add chain ip nat postrouting { type nat hook postrouting priority 100 \; }
+nft add rule nat postrouting oifname eth0 masquerade
+