The iptables cookbook should not be required.