iptables: rename to ip(6)tables-legacy, add PROVIDES