if platform_family?('rhel', 'debian', 'fedora')
  execute 'iptables -A INPUT -i eth0 -p tcp -m tcp '\
          '--dport 80 -m state --state NEW -m comment '\
          '--comment "http on 80" -j ACCEPT'
  execute 'iptables -N derby-cognos-web'
  execute 'iptables -A INPUT -j derby-cognos-web'
  execute 'iptables -A derby-cognos-web -p tcp -m tcp --dport 80 '\
          '-m comment --comment "derby-cognos-web" -j ACCEPT'
end