Check controller status before inspecting .live_controllers
Refactor iptables a bit.