remove iptable forwarding. use sql box for this