add iptables-snmp package (thanks to Nigel Roberts)