configcheck for iptables