iptables and 'manual' port forwarding on the fly?