Add iptables rules to survive boot

I summarized all the steps in this thread. any issues to be fixed in that?