manipulate iptables with ruby