Send the proper network ip, not the instance ip.
Use md5 to recognize iptable rules added.
Rename variable to make it clear that's the traffic that it's passed.
Cosmetic improvements.