puppet can't parse iptables-save properly... :(