added extra configuration option and test before apply iptables rules