use workaround for iptables on OVS interfaces

FIX: PRD-2617