I think it would also be needed to have the iptables code to fail as cleanly as possible in case iptables rejets what we ask.
I think it would also be needed to have the iptables code to fail as cleanly as possible in case iptables rejets what we ask.