Add a pkg for iptables support

Depends on #1592 (exec support, duped into this PR).
The error from iptables did not include the rule itself.  I could instead return fmt.Errorf("...", err) if you prefer.