wrapper to opscode firewall