fixed stupid iptables bug