Tweaking iptables criteria, added interface select