iptables: do not save state on stop