iptables-persistent does not handle restarting very well