Update iptables rules

* Reject filtered output packets, to ease debug
* Fix NTP OUTPUT filter
* Restore DHCP in desktop configuration
* Accept TCP reset in OUTPUT chain

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>