use become

handlers/main.yml

@@ -1,5 +1,5 @@
 ---
-- name: restart iptables
+- name: Restart iptables
   shell: sleep 2 && systemctl restart iptables
   async: 1
   poll: 0

tasks/config.yml

@@ -1,5 +1,7 @@
 ---
-- name: Set custom iptables rules
+- name: Setup iptables
+  block:
+  - name: Set custom iptables rules
     iptables_raw:
       name: 'iptables_custom_rules_{{ item.name }}'
       rules: '{{ item.rules }}'
@@ -11,7 +13,7 @@
       label: "{{item.name}}"
     tags: iptables
 
-- name: Set default iptables head rules
+  - name: Set default iptables head rules
     iptables_raw:
       name: iptables_default_head
       weight: 10
@@ -20,7 +22,7 @@
       rules: '{{ iptables_default_head }}'
     tags: iptables
 
-- name: Set default iptables tail rules
+  - name: Set default iptables tail rules
     iptables_raw:
       name: iptables_default_tail
       weight: 99
@@ -28,3 +30,4 @@
       state: '{{ (iptables_default_tail != "" ) | ternary("present", "absent") }}'
       rules: '{{ iptables_default_tail }}'
     tags: iptables
+  become: True

tasks/install.yml

@@ -1,11 +1,14 @@
 ---
-- name: Install package
+- name: Install iptables
+  block:
+  - name: Install packages
     package:
-    name: '{{ iptables_package }}'
+      name: "{{ iptables_package }}"
       state: latest
 
-- name: Enable and start service
+  - name: Enable and start service
     service:
       name: iptables
       enabled: True
       state: started
+  become: True