aggregate iptables in own chain