tunnel: fix netmask and ensure iptables rules removed upon ctrl-c from keyboard