CLOUDSTACK-6927: Allow virtual router to be correctly cleaned from iptables

Virtual router never get a "-def" definition in iptables