several iptables questions