shell script for iptable