puppet module for shorewall