iptables: fix rebuild errors on configuration changes