This is "iptables --string" patch