(MAINT) iptable disabling breaks in some weird edge cases

- when sudo isn't installed
- when iptables isn't installed (thanks centos-5 ec2 image)
is this the intended behavior now?