updating firewall rules to allow puppet to work