update ss-rules

add flush iptables rules function
no longer restart the firewall
add hotplug is used to reload the ss-rules