Honestly, I think handling iptables can be removed. Either way, I don't think this recipe will function as we expect based on our iptables cookbook.