[2014.1] Allow for lists of iptables matches

Fixes #12453

Was already fixed in develop, this is the fix for 2014.1