update iptables fails

[jmarhee]

unclear if rules re-apply cleanly, but bails if chain exists but nothing was loaded initially, requires retry to apply cleanly (flush and delete, then recreate?)

tables.go houses all this behavior, imported directly from droplan, but check how its invoked since i did not see similar behavior in droplan when public was disabled. seems to function as expected when public is enabled.