iptables-based firewall script with profiles