fix up iptables.active