add finish script to iptables