add puppet config for firewall exceptions