generate iptables forwardings