The iptables and speedway output generation differs slightly in how it handles default action (ACCEPT or DROP).  The iptables lib allows unspecified default policy, while speedway always generates a default policy.  This change fixes the default behavior to ensure speedway will always generate a default of DROP unless otherwise specified.  For iptables, if target:: line doesn't specify a default policy action, we simply don't generate any output to modify the current default action for that filter.
The iptables and speedway output generation differs slightly in how it handles
default action (ACCEPT or DROP).  The iptables lib allows unspecified default
policy, while speedway always generates a default policy.  This change fixes
the default behavior to ensure speedway will always generate a default of DROP
unless otherwise specified.  For iptables, if target:: line doesn't specify a
default policy action, we simply don't generate any output to modify the
current default action for that filter.

A bug previously generated speedway(iptables-restore) format output that would
not define the default action policy for target:: lines that did not include an
explicit default action, which caused problems when passed to iptables-restore.


sneakywombat/capirca,rarcotvmw/capirca,google/capirca,rarcotvmw/capirca,s3u/capirca,google/capirca,ryantierney513/capirca,google/capirca,jayceechou/capirca,s3u/capirca,sneakywombat/capirca,sneakywombat/capirca,google/capirca,dagmartin/capirca,azet/capirca,pettai/capirca,rarcotvmw/capirca,jethrogb/capirca,jethrogb/capirca,azet/capirca,jayceechou/capirca,pettai/capirca,ryantierney513/capirca,dagmartin/capirca,ryantierney513/capirca