optimize: make iptables load on boot