There is an ancient bug in bugzilla (#13) which says iptables should 
compile without 'O2'.  Not sure why this is important, but the below
patch makes it compile, and the resulting executable works.

Anyone comment on why these '#ifndef __OPTIMIZE' statements were added
in the first place, and whether I'm missing something by simply removing
them?

Phil