Check if current is empty for negation

Signed-off-by: Ken Barber <ken@bob.sh>
iptables 1.3.5 compatibility support

Signed-off-by: Ken Barber <ken@bob.sh>