add iptables snippets.