Allow for lists of iptables matches
Merge pull request #12848 from basepi/iptables12453

[2014.1] Allow for lists of iptables matches