finish iptables section