rhel7 iptable service workaround enable only if flag is set

Change-Id: I4d8868c9ae9476952bfc48d03113e39dc0b0fe1b