pre-restore iptables in /etc/network/interfaces