reformat iptables.rules a bit