diff --git a/de/heat-templates/scripts/instance_boot.sh b/de/heat-templates/scripts/instance_boot.sh
index 4436054..e3313af 100644
--- a/de/heat-templates/scripts/instance_boot.sh
+++ b/de/heat-templates/scripts/instance_boot.sh
@@ -271,13 +271,12 @@
 cat << EOF >> /etc/iptables/rules.v4
 -A DOCKER-USER -d ${net} -j ACCEPT
 -A DOCKER-USER -s ${net} -j ACCEPT
--A DOCKER-USER -j RETURN
-COMMIT
 EOF
     done
 
 cat << EOF >> /etc/iptables/rules.v4
 -A DOCKER-USER -j RETURN
+COMMIT
 EOF
     sudo netfilter-persistent reload
 }
diff --git a/de/heat-templates/top.yaml b/de/heat-templates/top.yaml
index 0064c38..baf54c4 100644
--- a/de/heat-templates/top.yaml
+++ b/de/heat-templates/top.yaml
@@ -130,7 +130,8 @@
     default: ''
   docker_ee_url:
     type: string
-    default: 'https://s3-us-west-2.amazonaws.com/internal-docker-ee-builds/docker-ee-linux'
+    default: 'http://mirror-us.mcp.mirantis.net/.snapshots/docker-ee-bionic-latest'
+#    default: 'https://s3-us-west-2.amazonaws.com/internal-docker-ee-builds/docker-ee-linux'
   docker_ee_release:
     type: string
     default: 'stable-19.03'