add iptables-allow-mdns-over-host-nat