libs/sys: properly parse iptables rules with not target set