set primary chain policies to ACCEPT before flushing chain