Chef configured + refactored iptables