Fix dynamic scoping in iptables.pp

Change-Id: I8322a42fd50b65d5ec40ce8df932ba4432ff9704
Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org>