Firewall formula for @saltstack