iptables: Refactor default return code usage