including iptables cookbook could be recommended, not required, can be readded when opscode ticket CHEF-3871 gets solved