Upgrades, run iptables cleaning only for required containers

I doesn't make sence to run iptables
cleaning, for containers, which
doesn't have port bindings, e.g.
volume containers.

Change-Id: I7c313e5bb2806cbf4beb067ace6c4dc614a73281
Closes-bug: #1362544