Update blacksalt.py

modify policy, doesn't append iptables twice