iproute2 needs to be explicitly installed, the iptables alternative needs to
iptables-legacy.