Added iptables rules (not tested AT ALL)
Added intial hosts unblock to make the intial state deterministic