Revert "bin/iptables.conf: don't flush tables when run & run only on bootup"

This reverts commit ef8afa3589e5a849d1778763ce876a28e1adc779.

WHYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY!
apt/preferences.d/stable-pdns: 3.3 broke pdns

It would just start up and do:

    May  7 16:15:28 u pdns[14138]: Listening on controlsocket in '/var/run/pdns.controlsocket'
    May  7 16:15:28 u pdns[14140]: Guardian is launching an instance
    May  7 16:15:28 u pdns[14140]: Reading random entropy from '/dev/urandom'
    May  7 16:15:28 u pdns[14140]: Unable to launch, no backends configured for querying
    May  7 16:15:29 u pdns[14138]: Child requested a stop, exiting
    May  7 16:25:36 u pdns[17096]: Listening on controlsocket in '/var/run/pdns.controlsocket'
    May  7 16:25:36 u pdns[17099]: Guardian is launching an instance
    May  7 16:25:36 u pdns[17099]: Reading random entropy from '/dev/urandom'
    May  7 16:25:36 u pdns[17099]: Unable to launch, no backends configured for querying
    May  7 16:25:37 u pdns[17096]: Child requested a stop, exiting
    May  7 16:27:17 u pdns[17538]: Listening on controlsocket in '/var/run/pdns.controlsocket'
    May  7 16:27:17 u pdns[17541]: Guardian is launching an instance
    May  7 16:27:17 u pdns[17541]: Reading random entropy from '/dev/urandom'
    May  7 16:27:17 u pdns[17541]: Unable to launch, no backends configured for querying

And "dig @localhost google.com A" wouldn't work
btc.is: add www.* alias (committing uncommitted changes)
lynx-cur/lynx.cfg: bump from Debian upstream
group: add rabbitmq
multitail.conf: Presumably Debian upstream changes...
passwd: also add rabbitmq user...
Add more postfix conf stuff
postfix/virtual: more aliases someone added
ssh/sshd_config: bump key bits
ssh/sshd_config: ban root logins, no idea why this was here