fix bug with iptables