Refactor Hiera settings for iptables