rearranged iptables, test phase