docker: fix iptables rule

We want to match by state, not by protocol.
Establish connections shouldn't be redirected

#5 - Create SAM server tunnels in trans-proxy

contained/bin/exec.sh

@@ -21,7 +21,7 @@ iptables -t nat -A OUTPUT -o eth0 \
 
 # Allow existing connections e.g for servers
 iptables -t nat -A OUTPUT -o eth0 \
-    -p tcp \
+    -m state \
     --state RELATED,ESTABLISHED \
     -j ACCEPT
 
@@ -43,5 +43,5 @@ ulogd -d
 tcpdump -i any -w /mount/tcp.dmp &
 
 export PYTHONPATH=/opt/bin
-python3 /opt/bin/trans_proxy/cli.py \
+python3 -m trans_proxy.cli \
         --verbose