hey, iptables rule insert works- and it's even idempotent.