Simple iptables rule management for the ICRT