cleaned up iptables rules