move start_iptables to setup.