Remove iptables >1.4.11 specific functionality

I'll run the e2e tests on this tomorrow, it looks like they're a bit of a moving target at the moment.
Assuming we can fix the issues, this deserves a comment as to why it is NOT using -C, since that seems to be the far more commonly used mechanism.