use stderr to debug iptables

Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com> (github: vieux)
Merge pull request #6124 from vieux/standadize_debug_iptables

use stderr to debug iptables