Well I had some misleading ideas. If external available ports are configured with network mode host normal iptables are working