Service[iptables] is reloaded each puppet run on DebianFor upstream

See https://github.com/example42/puppet-iptables/issues/18