add iptables settings