UC-207: Taking snapshot can start iptables service even though it's disabled

(former PT-51280291 - install a permissive set of rules when disabling firewall, do not shut down iptables)

- generate fail2ban rules when security enabled and firewall non restrictive
- add rules in nat and mangle table only when firewall restrictive