mechanism for allowing exceptions to the firewall
it's being repeatedly requested that the firewall allows access to locations on the local network.
I think we should be strict by default, but allow a power-user to introduce custom exceptions (initially it should be simple to support linux/iptables by reading rules from a file).
for reference, discussion about proton handles this: https://www.reddit.com/r/ProtonVPN/comments/7tlb3m/use_protonvpn_and_be_able_to_access_local_network/