Add a pkg for iptables support

Depends on #1592 (exec support, duped into this PR).
Nit: reduce nesting by inverting the condition and exiting early