iptables - the solution