add initial iptables.rules (from debian wiki)