Firewall based on iptables to support VPN