add iptables recipe