title: How to delete iptables rules added by kube-proxy?
body: <p>I want to manually delete iptables rules for debugging. 
  I have several rules created by kube-proxy based on service <code>nettools</code>:</p>
  
  <pre><code># kubectl get endpoints nettools
  NAME       ENDPOINTS            AGE
  nettools   172.16.27.138:7493   1h
  </code></pre>
  
  <p>And its iptables rules：</p>
  
  <pre><code># iptables-save|grep nettools
  -A KUBE-SEP-6DFMUWHMXOYMFWKG -s 172.16.27.138/32 -m comment --comment "default/nettools:web" -j KUBE-MARK-MASQ
  -A KUBE-SEP-6DFMUWHMXOYMFWKG -p tcp -m comment --comment "default/nettools:web" -m tcp -j DNAT --to-destination 172.16.27.138:7493
  -A KUBE-SERVICES -d 10.0.1.2/32 -p tcp -m comment --comment "default/nettools:web cluster IP" -m tcp --dport 7493 -j KUBE-SVC-INDS3KD6I5PFKUWF
  -A KUBE-SVC-INDS3KD6I5PFKUWF -m comment --comment "default/nettools:web" -j KUBE-SEP-6DFMUWHMXOYMFWKG
  </code></pre>
  
  <p>However，I cannot delete those rules:</p>
  
  <pre><code># iptables -D  KUBE-SVC-INDS3KD6I5PFKUWF -m comment --comment "default/nettools:web" -j KUBE-SEP-6DFMUWHMXOYMFWKG
  iptables v1.4.21: Couldn't load target `KUBE-SEP-6DFMUWHMXOYMFWKG':No such file or directory
  # iptables -D KUBE-SERVICES -d 10.0.1.2/32 -p tcp -m comment --comment "default/nettools:web cluster IP" -m tcp --dport 7493 -j KUBE-SVC-INDS3KD6I5PFKUWF
  iptables v1.4.21: Couldn't load target `KUBE-SVC-INDS3KD6I5PFKUWF':No such file or directory
  </code></pre>