I don't think that this cookbook should handle firewall changes. I think it is better to handle it separately using the [firewall cookbook](https://github.com/opscode-cookbooks/firewall).