Cherry pick typo fixes for iptables state

Cherry-picked the fix for #11318, as well as @techhat's fix for **set_policy** that doesn't have an associated issue in the tracker.