diff --git a/iptables/_rule.sls b/iptables/_rule.sls
index 1c658f7..ebce336 100644
--- a/iptables/_rule.sls
+++ b/iptables/_rule.sls
@@ -57,4 +57,8 @@
   - require_in:
     - iptables: iptables_{{ chain_name }}_policy
   {%- endif %}
+  {%- if grains.get('virtual_subtype', None) not in ['Docker', 'LXC'] %}
+  - require:
+    - iptables: iptables_{{ chain_name }}{% if rule.family is defined %}_{{ rule.family }}{% endif %}
+  {%- endif %}
   - save: True
diff --git a/iptables/rules.sls b/iptables/rules.sls
index 1deb606..4e9e6e2 100644
--- a/iptables/rules.sls
+++ b/iptables/rules.sls
@@ -1,7 +1,30 @@
 {% from "iptables/map.jinja" import service with context %}
+{%- if grains.get('virtual_subtype', None) not in ['Docker', 'LXC'] %}
 
 {%- for chain_name, chain in service.get('chain', {}).iteritems() %}
 
+iptables_{{ chain_name }}:
+  iptables.chain_present:
+    - family: ipv4
+    - name: {{ chain_name }}
+    - table: filter
+    - require:
+      - pkg: iptables_packages
+
+{%-   if grains.ipv6|default(False) and service.ipv6|default(True) %}
+iptables_{{ chain_name }}_ipv6:
+  iptables.chain_present:
+    - family: ipv6
+    - name: {{ chain_name }}
+    - table: filter
+    - require:
+      - pkg: iptables_packages
+{%-     if chain.policy is defined %}
+    - require_in:
+      - iptables: iptables_{{ chain_name }}_ipv6_policy
+{%-     endif  %}
+{%-   endif %}
+
 {%- if chain.policy is defined %}
 iptables_{{ chain_name }}_policy:
   iptables.set_policy:
@@ -9,6 +32,8 @@
     - chain: {{ chain_name }}
     - policy: {{ chain.policy }}
     - table: filter
+    - require:
+      - iptables: iptables_{{ chain_name }}
 
 {%-   if grains.ipv6|default(False) and service.ipv6|default(True) %}
 iptables_{{ chain_name }}_ipv6_policy:
@@ -17,6 +42,8 @@
     - chain: {{ chain_name }}
     - policy: {{ chain.policy }}
     - table: filter
+    - require:
+      - iptables: iptables_{{ chain_name }}_ipv6
 {%-   endif %}
 {%- endif %}
 
@@ -41,3 +68,4 @@
 {%- endfor %}
 
 {%- endfor %}
+{%- endif %}
diff --git a/tests/pillar/iptables_server.sls b/tests/pillar/iptables_server.sls
index eb1feaa..7ef038d 100644
--- a/tests/pillar/iptables_server.sls
+++ b/tests/pillar/iptables_server.sls
@@ -3,9 +3,8 @@
     enabled: true
     chain:
       INPUT:
-        rule:
-          test:
-            position: 1
+        rules:
+          - position: 1
             table: filter
             protocol: tcp
             destination_port: 8088