don't remove iptables rules on failover