add support for iptables.  better support for single-host vs multi-host deploys