By moving the '--jump' definition before the rest of the rule, you enable the use of '--reject-with' options. These options can only be used when specified after '--jump REJECT', otherwise it will give an 'unknown option' error.
This pull-request should be added together with pull-request #15, as this request cleans up the output generated by iptables-rules.erb, by preventing build-in chains to be added a second time (could maybe also be a useful patch without pull-request #15).
Reverted earlier fix for pull-request #15, this solution is much more robust. Sorry for the spam, will stop committing now until all this is reviewed and accepted or denied.
Extended the rule test with a test for jumps to chains that are not actually created on the system, but are already processed in the current recipe.
Added a function for the cleanup of test chains so the cleanup commands can be called from several places where cleaning is needed. Partly based on pull request #18 which also adds extra cleanup code...
Updated code so it can be merged/used against current tip...