T3-iptables class manifest