better way to poll iptables