simplify iptables
show runtime