update iptables rules