ok, plain sh works now for invirt-web-iptables.init