wow! that's a lot simpler! And agree makes sense to just assume iptables is already installed.