The ossec fw rules use a hosts entry for the monitor server.
Moved applying iptables rules to after setting the host entry