Update iptables.service example. Change state name to include from firewall
to iptables and add the required services section to the pillar example.