add iptables config script