base/firewall: add table and chain to custom chain