add the firewall module
Update rules to allow vagrant