add iptables support, and poke hole in firewall for dns queries