remove firewall from the ordered chain because if you choose to turn the firewall off puppet breaks