Hi Eric,

I wrote the iptables service and documentation. So, the mistake is
entirely due to my poor grasp of iptables! :-)

I have applied your patch, and pushed to master. Thanks!

Cheers,
Arun