(MAINT) do not disable iptables by default

- break on some el systems, need to better handle the edge cases