[OPTION 1] BZ#1122701 - Incoming ports are wide open

https://bugzilla.redhat.com/show_bug.cgi?id=1122701

OPTION 1: Save firewall rules before disabling firewalld.

Advantage: less intrusive on puppet level. Disadvantage: saves the complete firewalld backend chains, so the resulting iptables rules are much more complicated than necessary. See http://fpaste.org/122022/35270140/

I think we should consider going with option 2.