explain the 'iptables -w' check