[iptables] fixes
bump