Don't create /etc/iptables/rules
puppet-iptables was creating /etc/iptables/rules and linking it to
rules.v4.  We have removed this with
so this can simply make
rules.v4 and rules.v6 files, as required by
[netfilter|iptables]-persistent
@@ -63,7 +63,6 @@ cat > $ipv4_rules << EOF
-A openstack-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
EOF
-ln -s ${ipv4_rules} ${rules_dir}/rules
cat > $ipv6_rules << EOF
*filter
