firewall3: clear contnrack table on flush, set policies to drop during rule reload