Include the dependency of iproute2's ip binary into the makefile

While on it remove the + (selection) from iptables to avoid a
circular dependency. Needs testing...