first draft of iptables management