iptables flush is handled by puppet firewall provider. Adding manual flush just add errors iat the 1st run
Merge pull request #1 from llicour/master

no more manual flush