diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
new file mode 100644
index 0000000..21a38ea
--- /dev/null
+++ b/manifests/firewall/iptables.pp
@@ -0,0 +1,13 @@
+## puppet_cd::firewwall::iptables.pp
+# Module name: puppet_cd
+# Author: Arne Teuke (arne_teuke@confdroid)
+# @summary  Class manages firewall settings for the puppet_cd module.
+###############################################################################
+class puppet_cd::firewall::iptables (
+
+) inherits puppet_cd::params  {
+
+  if $fqdn == $pt_puppetmaster {
+
+  }
+}
diff --git a/manifests/server/service.pp b/manifests/server/service.pp
index d5d7d3e..a0f335d 100644
--- a/manifests/server/service.pp
+++ b/manifests/server/service.pp
@@ -9,6 +9,8 @@ class puppet_cd::server::service (
 
   if $fqdn == $pt_puppetmaster {
 
+    include puppet_cd::firewall::iptables
+
     # manage puppet server service
 
     service { $pt_service: