LAN access: new/revised iptables ruleset