'''
  service { 'iptables':
    enable    => true,
    ensure    => running,
    subscribe => File['/etc/sysconfig/iptables'],
  }
'''