@krogoth Kiiiinda, yeah, except that shelling out to iptables is a rough way to live your life.
It's a good idea, but it needs to go further.