[enh] use iptables for the public ip