s2ipt: A Lightweight Network Intrusion Detection/Prevention System based on IPtables