iptables rules for asterisk behind NAT