iptables support in puppet modules for head nodes.