firewall dropping connection killing puppet - just do new rules