manages iptables