clean up iptables base recipe