avoid calls to iptables_rule_exist

We can return that info with iptables_get_chains().
s/rulset/ruleset/