Don't use the frisbee uploaded when the target node is firewalled.

Supporting the uploader through the cnet firewall right now would require
opening up every possible unprivileged TCP port. Don't want to go there.

utils/create_image.in

@@ -247,6 +247,23 @@ if (!defined($experiment)) {
 my $pid = $experiment->pid();
 my $eid = $experiment->eid();
 
+#
+# To avoid blowing a cavernous hole ("allow all TCP ports to boss")
+# in the per-experiment firewall, we don't use the frisbee uploader if
+# the node is firewalled.
+# 
+if ($usefup && $experiment->IsFirewalled()) {
+    print "*** WARNING: $node_id is firewalled, not using Frisbee uploader\n";
+    $usefup = 0;
+    if ($NONFS) {
+	$usenfs = 0;
+	$usessh = 1;
+    } else {
+	$usenfs = 1;
+	$usessh = 0;
+    }
+}
+
 #
 # Grab the imageid description from the DB. We do a permission check, but
 # mostly to avoid hard to track errors that would result if the user picked