add always_accept rules for lo / br0