ip6tables enablement

backed out old commit, using misc/services.sh instead