mapping rules to iptables