generalized iptables rules