The iptables-1.2.7a-r1 ebuild attempts to use grsecurity-${PV}-iptables.patch; unfortunately, this does not appear to be in the portage tree.
sorry, forgot to commit the patch :(