Apart from what others have mentioned already,the whole point of BPF is to replace iptables.