dcrosta/cookbook-simple-iptables — pull request #6 by phoolish (2012-10-01 10:46:19+00:00)
Title: Allows for rules with no jump attribute

Helpful for adding logger module support:
simple_iptables_rule "system" do
rule "--match limit --limit 5/min --jump LOG --log-prefix \"iptables denied: \" --log-level 7"
jump "NONE"
end

And recent module support:
simple_iptables_rule "ssh" do
rule "--proto tcp --dport 22 --in-interface eth0 --match state --state NEW --match recent --set"
jump "NONE"
end