to flush all rules, add -X and -t with nat and mangle