I see a problem:
Your webserver should be running as nobody. Nobody does not have permissions to run iptables. Giving nobody permission makes me leary that you'll be opening up other security issues.

Neil Watson
watson-wilson.ca