It may be better to put this logic in oo-admin-ctl-iptables-port-proxy.  The remaining functionality seems to be in there.