fix iptables rules for trusted hosts