change install dir to /opt by default; fix iptables restoring process