updated iptables template to use ports for easier capturing