Distinguish older version of iptables by version number.

Distinguish isn't by presence or absence of pkgconfig (newer versions
are supposed to have it), but by version number (too).
This check is still inexact, though.