file { "/etc/firewall.sh":
    owner => root,group => root,mode => 550,source => "puppet:///files/iptables.sh"
}