This is a duplicate of #682. Following a change made in #602. It would be good to get a flag to remove the ipvs Firewall chain "accept all". I will be adding this, I just wanted a clear feature/issue to reference.