add iptables and edit config.yml