always flush iptables rules