diff --git a/build/debian-iptables/Dockerfile b/build/debian-iptables/Dockerfile
new file mode 100644
index 00000000000..5c512e972b0
--- /dev/null
+++ b/build/debian-iptables/Dockerfile
@@ -0,0 +1,7 @@
+FROM debian
+
+# All apt-get's must be in one run command or the
+# cleanup has no effect.
+RUN apt-get update && \
+    apt-get install -y iptables && \
+    ls /var/lib/apt/lists/*debian* | xargs rm
diff --git a/build/debian-iptables/Makefile b/build/debian-iptables/Makefile
new file mode 100644
index 00000000000..df18e7dc415
--- /dev/null
+++ b/build/debian-iptables/Makefile
@@ -0,0 +1,12 @@
+.PHONY:	build push
+
+IMAGE = debian-iptables
+TAG = v1
+
+build:
+	docker build -t beta.gcr.io/google_containers/$(IMAGE):$(TAG) .
+
+push:	build
+	gcloud docker --server=beta.gcr.io push beta.gcr.io/google_containers/$(IMAGE):$(TAG)
+
+all:	push