wrapper to opscode's iptables