Remove iptables >1.4.11 specific functionality

I'll run the e2e tests on this tomorrow, it looks like they're a bit of a moving target at the moment.
I'm surprised this works.  In fact I am skeptical that it does.  iptables reorders some arguments  in its output from the input you gave it originally, which means grep should not match.  Also, the args passed to checkRule include things like "-t nat" which are not in the output from iptables-save.

To do this right you'd have to parse each line into tokens, sort them, and then do a subset match with the passed-in args, minus the -t and table flags.

Or am I missing something?