add conffiles to iptables