iptables: Fix fallthrough rules