templatize iptables-rules
generate firewall via publish