iptables flush workaround