remove _has_check and just check iptables --help