Split up Gentoo and Debian rules, use iptables-persistent