removed iptables from mds.pp