modify iptables script