data control for ss using iptable