reworking section 5
Removed 4.7, added link to Sir's IPtables