Sometimes generates rules too long for iptables to accept

[andrew-vant]

Apparently iptables has a length limit on rules, and some pillar configurations result in a file that exceeds it. For example, this happens when using the minions glob option against a sufficiently large environment; it produces a large number of single IPs in a single rule.

Probably there should be one output rule for each resulting IP literal. This could produce a very long rules file, but it should work until a cleaner method can be found.