Puppet firewall setup