allow managersearch. comment out localhost allow in setup

salt/firewall/assigned_hostgroups.map.yaml

@@ -164,7 +164,7 @@ role:
     chain:
       DOCKER-USER:
         hostgroups:
-          manager:
+          managersearch:
             portgroups:
               - {{ portgroups.playbook }}
               - {{ portgroups.mysql }}

setup/so-functions

@@ -1179,9 +1179,10 @@ firewall_generate_templates() {
    
 	logCmd "cp ../files/firewall/* /opt/so/saltstack/local/salt/firewall/"
 
-	for i in analyst beats_endpoint endgame sensors manager managersearch elastic_agent_endpoint searchnodes; do
-		$default_salt_dir/salt/common/tools/sbin/so-firewall --role="$i" --ip=127.0.0.1
-	done
+    # i think this can be commented out for 2.4
+	#for i in analyst beats_endpoint endgame sensors manager managersearch elastic_agent_endpoint searchnodes; do
+	#	$default_salt_dir/salt/common/tools/sbin/so-firewall --role="$i" --ip=127.0.0.1
+	#done
 
 }