[M] update nat script with iptable clean rules