require shorewall is up before trying to do bundler update

Because bundler tries to pull things via git, we need to make sure shorewall is up before it does that, otherwise the strict initial firewall blocks it.

(from redmine: created on 2013-09-05, closed on 2013-09-05)