Issue #632: Ensure iptables is installed

Also moved the execute resource (service reload) to the bottom and
commented it.  And `s/package_overrides/package_options/`.