REJECT is not valid for chain policies.
Add -emit-new-deps option, ignore errors for iptables -N.
Add -iptables-command option.