iptables-apply. a better iptables-apply that uses start-stop-daemon to implement a real dead-man's handle