make sure that the base iptables template is the only thing updated