Appologies for previous email with the huge subject line - i try again:
These patches implement a second version of firewalling for the terremark driver. This is still a prototype - we will try and see if this model 'fits' for ec2 before committing to using this (terremark and ec2 are the only clouds that require management of firewall rules in order to gain access to a given instance).
Currently a firewall_rule consists of: public_ip, public_port, protocol, private_ip, private_port (think NAT).
--marios