fix the iptables bug