Implement LXC_MAIN_IFACE to allow private LXCs to go out.
Remove useless rules. it works without them.