new method iptables_chain_digest() to compute digest

Note: My previous commit introcuded a bug, using ipset_chain_digest()
for the iptables ruleset - this is a fix for that.
avoid calls to iptables_rule_exist()
remove unneccessary iptables code