minor fix
add iptables simple recipe