fixes in iptables