replace `iptables` cookbook with `afw`