fix bug & enhance iptables