add iptables script