Use new iptables syntax

Move the negation operator (`!`) to be before that option, so that it
also works on openSUSE and not just SLES. New syntax works on both.