Revert "do not allow custom policies (not supported by iptables)"

This reverts commit b26398497cea1f478582e0828d21068a5d5dad79.
support creating custom chains, rename provider

policy provider was renamed to chain