Invert 998 drop / 999 allow firewall rule

Otherwise, 999 allow would never be hit.

Change-Id: Id116fd32d2f6445a2b46b124446583df95da65b8
Signed-off-by: Paul Belanger <paul.belanger@polybeacon.com>
Merge "Invert 998 drop / 999 allow firewall rule"