sysadmin: add basic iptables rules