Set status_command for iptables-persistent to "true".
Set status_command for iptables-persistent to "true".

* iptables-persistent isn't a real service, so Chef
  can never find it in the process table and runs
  start on it every chef run, unnecessarily reloading
  the firewall rules when there is no change in the
  rule set.
* Setting status_command to "true" causes Chef
  to never call start on iptables-persistent,
  which is fine because any rule changes trigger
  a restart on iptables-persistent.

williamsjj/firewall,williamsjj/firewall