In order to allow iptables commands to run within the container, im having to add the --priviledged flag. Need to find a way around it. Hopefully docker can provide a more fine grained way of specifying what capabilities to allow within the container.