iptables skeleton