iptable core class