basic firewall recipe for chef