Remove existing munin node rules first
iptables state downgrade when lacking conntrack