does iptables/nftables work on the host?