cfg firewall: adds some ips to allow ssh from
cfg-firewall-cider: allows puppet from melkweg