add physdev support

rebased from https://github.com/puppetlabs/puppetlabs-firewall/pull/82