fix iptables commands