love puppetlabs-provided boxes; hate all firewalls