add mc-1 iptables rules