fix corosync rules (restrict to cluster network)