Clean up iptables logging

* Move iptables logs to its own file /var/log/iptables.log
* Enable logrotate for the new log file

blueprint infra-iptables

Change-Id: I0f547f547f1d03cb666b400fe18358be43e29883