Add VPNs and PPPoE rules before regular ones. Fixes #2837