fix iptables with -d