Moved iptables command to appropriate section
Added the correct SSH tunnel command