Note: I had to flag iptables as FPIC-QUIRK to assure that the installed libiptc will be PIC so that 3rd. party applications or libraries can link against it properly.