PT-51280291 - install a permissive set of rules when disabling firewall, do not shut down iptables.

PT-51280291: install a permissive set of rules when disabling firewall, do not shut down iptables

- generate fail2ban rules when security enabled and firewall non restrictive
- add rules in nat and mangle table only when firewall restrictive