Firewall module for puppet