Iptables: reload on rule change