Adding the ability to specify multiple iptables match options