I understand what you are trying to do with this file but should this be part of a separate PR since it isn't directly related to the iptables setup (or is it)? Just trying to get the iptables thing done so we can unblock the product security review and get things moving. Then we can improve our interface to Ansible.