chef/cookbooks/apache2/templates/default/port_apache.erb

<% node['apache']['listen'].values.map(&:to_a).flatten.uniq do |port| -%>
-A FWR -p tcp -m tcp --dport <%= port %> -j ACCEPT
<% end %>