thought about this one all I'm going to for the day, figuring out a good attribute model pretty close to done, (see attributes/default.rb)
will probably implement the role / static rules generators as "definitions" and I need to put a little more thought into ebtables and some of the
other targets and required parameters for iptables