Change default ferm policy to DROP

In order to achieve this we need to allow established, related packets
so that connections don't timeout.

Change-Id: I6577403d2fa7a56d2d2a741aa920fdab2c0684cd