Rock! @soleblaze hipped me to the fact that IP Tables may be replaced soonish (no timeframe): http://is.gd/oLhk (verily I say yee-hah!)