oracle does some funky things in cloud init ---- take a look at whats in

/etc/iptables/rules.v4

and

/etc/iptaables.v6