I'd prefer using the `iptables_ng_rules` provider, than overwriting the rules attribute.