cherry-pick e6cc43b5cff33a08761116bf3bc38c8c5bf3fce6

removes the extraneous -d from the ubuntu iptables rules