reconfigure iptables
refactor rewrites to support current puppetlabs/apache syntax
don't touch forward chain
more notifies that try to fix the apache restart issue