dpi: when the closed-source DPI engine restarts, it flushes part of the iptables, breaking the NAT loopback and probably other things as well.  This is an attempt to reapply all firewall rules in those DPI restart calls I was able to intercept in the open-source parts.  Unsure if these are enough.