diff --git a/de/heat-templates/scripts/instance_boot.sh b/de/heat-templates/scripts/instance_boot.sh
index e3313af..4436054 100644
--- a/de/heat-templates/scripts/instance_boot.sh
+++ b/de/heat-templates/scripts/instance_boot.sh
@@ -271,12 +271,13 @@
 cat << EOF >> /etc/iptables/rules.v4
 -A DOCKER-USER -d ${net} -j ACCEPT
 -A DOCKER-USER -s ${net} -j ACCEPT
+-A DOCKER-USER -j RETURN
+COMMIT
 EOF
     done
 
 cat << EOF >> /etc/iptables/rules.v4
 -A DOCKER-USER -j RETURN
-COMMIT
 EOF
     sudo netfilter-persistent reload
 }
diff --git a/de/heat-templates/top.yaml b/de/heat-templates/top.yaml
index baf54c4..0064c38 100644
--- a/de/heat-templates/top.yaml
+++ b/de/heat-templates/top.yaml
@@ -130,8 +130,7 @@
     default: ''
   docker_ee_url:
     type: string
-    default: 'http://mirror-us.mcp.mirantis.net/.snapshots/docker-ee-bionic-latest'
-#    default: 'https://s3-us-west-2.amazonaws.com/internal-docker-ee-builds/docker-ee-linux'
+    default: 'https://s3-us-west-2.amazonaws.com/internal-docker-ee-builds/docker-ee-linux'
   docker_ee_release:
     type: string
     default: 'stable-19.03'