Fix iptables name

An iptable name is limited in length; this patch uses the min port number instead of the
tunnel id to set up the iptable name.