Updates.

* iptables rules weren't there
* ipforwarding wasn't sticking