[Bug 1129] New: Extensions targets and matches for iptables