patch-redhat: don't fail if iptables rule already removed