more on managing firewall with puppet