Use Berkeshelf for iptables too