Nuke puppet firewall plugin and just do the basic IPTables rules