firewall: flush conntrack table after changing interface rules