This pull-request should be added together with pull-request #15, as this request cleans up the output generated by iptables-rules.erb, by preventing build-in chains to be added a second time (could maybe also be a useful patch without pull-request #15).