fix iptables rules