Fix target calculation.  Fixes case where cleanup_firewall couldn't clean up iptables with multiple populated user-defined chains.