add iptables rules for demo