iptables script tweaks