As I want to consistently configure iptables rules independently on the underlying distribution, while at the same time respecting the way the current distribution handles their rules, I just released iptables-ng yet another iptables cookbook for chef.

I also wrote a a blogpost why I chose to write it and why it is (imho) better than the other iptables cookbooks around.