port iptables to new config format, change handling of TITLE and DESCRIPTION