add iptables autoconfig support