consumer_recipe.rb

  template "/etc/sysconfig/iptables" do
    extend Helper
    source "chef_iptables_ruleset.erb"
    owner = "root"
    mode "0600"
    variables(
      :static_inbound => static_inbound_ruleset,
      :dynamic_inbound => dynamic_inbound_ruleset,
      :static_outbound => static_outbound_ruleset,
      :dynamic_outbound => dynamic_outbound_ruleset
      )
    notifies :restart, "service[iptables]"
  end

helper_module.rb

module Helper
 def static_inbound_ruleset
  ruleset.static_inbound_ruleset.uniq
 end
 def dynamic_inbound_ruleset
  ruleset.dynamic_inbound_ruleset.uniq
 end
 def static_outbound_ruleset
  ruleset.static_outbound_ruleset.uniq
 end
 def dynamic_outbound_ruleset
  ruleset.dynamic_outbound_ruleset.uniq
 end
 def ruleset
   @ruleset ||=  IptablesRules.new node
 end
end