GitLab

iptables top-level chain updates should happen within CommandListener()
when it invokes the various modules' setupIptablesHooks().
And remove the extra DROP rule.

Change-Id: I33d2cfbd5444516f855ff85152c472352944cc77