including all CLC into iptable rules (needed for HA)