optional iptables rule; bump up version to 1.11.0