draft for iptable fab file