Only the root user or a user who has escalated to root can modify the IPtables filters.
References: AC-4 (10)