[iptables] autostart and default action