Linux firewall -- IPtables configuration strategy