Yeah turns out it's a bad idea destroying order of iptables policy.