iptables has amnesia :-)