Firewall puppet module