Add the puppetlabs firewall module
Fix #90: Add a firewall

Caveat emptor: this protects ONLY IPv4.

Currently we're on a machine without IPv6 access anyway, but it's worth
being aware of.