5 ways your firewall can keep ransomware out and lock it down if it gets in