include base::iptables to avoid error when running as puppet apply

NEWS

 release/004.051 (2015-07-27)
 
-    [os] Small fix in base::os::debian to one of the systemd-related 
+    [os] Small fix in base::os::debian to one of the systemd-related
     syslog-filter regexes (akkornel)
 
-    [kerberos] Change the configuration for the WIN.SLAC.STANFORD.EDU domain, 
+    [kerberos] Change the configuration for the WIN.SLAC.STANFORD.EDU domain,
     as per Kent Reuber (see INC000003427399) (akkornel)
 
     [rpm] Remove EL6 package requires of yum-plugin-downloadonly, since
     yum-3.2.29-69 includes this plugin and obsoletes the individual
     package (thus putting the puppet ensure in a loop) (jlent)
 
+    [iptables] Add an "include base::iptables" to base::iptables::rule
+    define so it will run correctly by itself. (adamhl)
+
 release/004.050 (2015-07-24)
 
-    [rpm] Making available openafs-1.6.{7,8}-EL{5,6,7}.repo files 
+    [rpm] Making available openafs-1.6.{7,8}-EL{5,6,7}.repo files
     pointing to yum.stanford.edu. Also edited rpm.pp to reflect that
     EL7 hosts should get 1.6.8 by default (jlent)