question and answer about iptables