updated iptables config