Treat iptables as any other service (avoid double start)