replace REJECT with -j DROP