[F] fix jessie/sid support. package should be iptables-persistent, service should be netfilter-persistent :(