fix iptables races; use -w everywhere

Signed-off-by: Momchil Atanasov <m.momchil@gmail.com>