template iptables configuration