Módulo condition

iptables -A FORWARD -p tcp --dport 80 -m condition --condition internet -j DROP

echo 1 > /proc/net/nf_condition/internet