Giuseppe's patch for ignoring output of iptables when dropping inexisting rules
drwxr-xr-x - root-context
drwxr-xr-x - slice-context