Moved IPtables filter to bottom to avoid parse errors on syslog