Basically iptables needs to be able to output to the terminal and talk to unconfined_pipes from the tool.