add iptables to common role