Fix 'unless' command regexps to work with ufw 0.31.1 output.

The output of a Puppet statement like

  ufw::reject { 'reject-plaintext-http':
    ip   => 'any',
    port => 80,
    proto => 'tcp'
  }

looks like this :

  80/tcp                     REJECT      Anywhere

... so no leading 'any' string. By adding another regexp to the grep
instead of replacing the current one, presumed backwards compatibility
is retained.
Tighten up 'unless' command regexps.

It would be a serious bug if some rule was not applied because the
IP address happened to match another rules IP address while not
being the same.

E.g. 192.168.0.10 would not be filtered if 192.168.0.105 already was.