BF: default type to unreachable
ENH: consolidate where blocktype is defined for iptables rules