iptables_cmd interface and more

Issue commands directly to iptables as a last resort.