added automatic firewall confguration

uses puppetlabs/firewall module to create an iptables rule for the $varnish_listen_port. This can be deactivated with class { "varnish": manage_firewall => false, }