add firewall cookbook