adding firewall capabilities to puppet master