Puppet module for Shorewall