show kvm box iptables before pinging node