Simple host-based permit-by-exception iptables generation script