Add chef recipe for nat firewall