When I tried to create 'iptables' resource in my puppet code using puppetlabs/firewall I got a duplicate resource error because of hardcoded 'iptables' resource set to ensure => 'present' in that module.
Please make that verion configurable.