iptables rule to allow comm & create dirs