ruleset_generate_vm_rule: avoid multiple calls to generate_nfqueue()
ruleset_generate_vm_rules: use 'warn' instead of 'die'

We want to be able to update our rules, even if somebody defined
a wrong rule for his VM.
correctly save aliases