config: wrap iptables in flock to avoid concurrancy.