kernel bug workaround to prevent leaking packets

Add iptables rules to workaround apparent kernel bug that leaks
FIN packets. Props to Mike Perry.

https://lists.torproject.org/pipermail/tor-talk/2014-March/032507.html
convert tabs to spaces