Comment 18 for bug 1612185

For 9.x and 10 we need https://github.com/puppetlabs/puppetlabs-firewall/pull/647. As a stop gap until the upstream can be merged, the commit could be cherrypicked into a local version of puppetlabs-firewall and a custom tag created.