iptables rules order

[pguimond]

iptables -t filter -A INPUT -m set --match-set tallow src -j DROP

Does not apply when rules already exists as it insert at bottom.

iptables -I INPUT 1 -m set --match-set tallow src -j DROP

Fix the issue.

[aversecat]

One of the reasons I never did this originally was that once we hard code rule numbers, they can and absolutely will conflict with other firewall tools. So this change might just break existing deployments.

I'm not super against this, but it will have to be a new cmdline option to switch the behavior in this new way, or a config option.