change NH and iptables configuration