nixos/firewall: Cleanup in case reload fails
Merge pull request #4114 from wkennington/master.firewall

nixos/firewall: Cleanup in case reload fails
Add coreutils dependency to ant launcher script

Closes #4106.
nixos/nat: Don't flush tables, create subchains for autogenerated rules