allow for different scratch dirs, instead of hardcoded to /etc/iptables....

this will be handy for handling multiple rule sets