iptables-config become a template