iptables will wait for exclusive access using the "-w" switch if another process has already a lock on it.