How does iptables work?