iptables: should apply to any (dirs in particular)